[Freeipa-users] DNSSEC DANE TLSA

[Petr Spacek]

On 6.6.2016 14:59, Günther J. Niederwimmer wrote:
> Hello,
> 
> is it possible with a FreeIPA Certificate make a DANE entry in IPA DNS ?

Yes, in recent versions of FreeIPA you can add TLSA records.

You have to generate the TLSA records manually, e.g. using hash-slinger:
https://admin.fedoraproject.org/pkgdb/package/rpms/hash-slinger/

Feel free to open a feature request on
https://fedorahosted.org/freeipa/newticket
if you can think of way to automate this.

-- 
Petr^2 Spacek